Setting up TLS (for name owners)

ncdns includes the tool generate_nmc_cert. This tool can be used to create a self-signed Namecoin TLS certificate that is compatible with ncdns’s Chromium integration. (Standard certificate generation tools like openssl are not usable for this purpose.)

(Users who know what they are doing can choose other ECDSA curves; use the --help option to see the list of available curves.)

The JSON object displayed should be enclosed in an array, and placed in the tls field for the domain where you want the TLSA record to appear. Usually, this will be the _443._tcp subdomain of the domain name that points to the website. An example of a typical configuration is: